$ rpki-client -vvf rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.mft File: eEW0a3Dd65eCVHguzbrsQcg-lyM.mft (raw, json) Hash identifier: DNBJuHFqsefmQv35LrJr8FlNrLevhNxOsPuX2YkV+wM= Subject key identifier: 1E:19:AA:A8:25:68:EF:2D:B6:5C:E4:46:A4:AE:AD:FD:98:9B:E7:F2 Authority key identifier: 78:45:B4:6B:70:DD:EB:97:82:54:78:2E:CD:BA:EC:41:C8:3E:97:23 Certificate issuer: /CN=A916C108/serialNumber=7845B46B70DDEB978254782ECDBAEC41C83E9723 Certificate serial: 06A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEW0a3Dd65eCVHguzbrsQcg-lyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.mft Manifest number: 06A2 Signing time: Thu 24 Apr 2025 21:59:53 +0000 Manifest this update: Thu 24 Apr 2025 21:59:53 +0000 Manifest next update: Thu 01 May 2025 21:59:53 +0000 Files and hashes: 1: eEW0a3Dd65eCVHguzbrsQcg-lyM.crl (hash: bfBn1uOvHfxV4uQoPHX2cy9We51ObFySzeVCRi4k7kE=) 2: D6C646EE616611EB87E8BA7CC4F9AE02.roa (hash: cjWtcLKmCLCcdb6nM1rkr3+SsLnHwKcSqveOiLm8S0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.crl rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEW0a3Dd65eCVHguzbrsQcg-lyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C108, serialNumber=7845B46B70DDEB978254782ECDBAEC41C83E9723 Validity Not Before: Apr 24 21:59:53 2025 GMT Not After : May 1 21:59:53 2025 GMT Subject: CN=680ab459-3f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:de:6e:80:42:44:d7:af:5e:55:ae:9b:76: 92:08:93:1a:12:f0:7b:56:9d:c1:0a:3c:6c:40:7b: 92:e1:ff:82:2a:83:95:10:72:30:1d:40:04:1a:af: bc:c9:fb:76:71:94:d5:dd:e2:d5:fa:18:31:80:7e: 24:40:c2:10:a2:70:d4:ab:d4:65:68:8b:b1:e4:e8: cf:9e:ec:ec:03:b0:b6:c6:63:a7:4b:24:62:e6:81: 62:3a:d4:4e:bb:62:3b:b4:58:12:16:ec:46:57:28: 80:d6:ea:f5:77:42:b3:59:75:3b:60:13:a0:73:02: 5d:e6:1c:66:10:80:04:02:9e:df:bf:9a:f2:d9:c8: f2:85:c7:3a:ce:9a:a0:66:e7:38:9b:e9:a7:7b:ac: 7b:bb:b1:3c:d6:7a:5c:12:42:44:60:90:ba:47:e4: 20:e5:91:33:be:34:d6:e8:3a:c9:cf:72:46:19:d7: 26:fe:f6:ad:fd:0c:4f:f6:7f:b2:c6:d4:ee:ee:9e: 0d:86:09:54:c8:b6:1a:99:74:e2:bf:ba:39:60:cf: 43:70:46:99:bf:3a:16:db:a6:9d:cb:94:51:59:37: 67:40:ac:d7:68:f2:b4:0f:89:4c:b9:3b:6b:5e:e0: 92:e0:bb:dc:b3:35:fc:ef:f4:a7:8f:7b:78:10:b1: 11:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:19:AA:A8:25:68:EF:2D:B6:5C:E4:46:A4:AE:AD:FD:98:9B:E7:F2 X509v3 Authority Key Identifier: keyid:78:45:B4:6B:70:DD:EB:97:82:54:78:2E:CD:BA:EC:41:C8:3E:97:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEW0a3Dd65eCVHguzbrsQcg-lyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C108/0D334ED6616511EB8D45687AC4F9AE02/eEW0a3Dd65eCVHguzbrsQcg-lyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b5:ac:37:18:0b:4d:fe:84:d1:78:a8:a3:9b:3d:5a:2d:18: e4:88:b2:18:83:59:33:58:d6:7a:11:72:d1:43:cf:89:ac:fe: 5e:22:b8:d4:cc:2b:9e:51:2a:cf:ef:a9:2e:43:f8:ea:d0:32: d2:c8:17:88:6d:33:f7:9f:ef:74:7c:7c:cf:d1:87:c8:f7:02: de:48:ff:94:7c:d7:8e:5a:3d:66:0f:27:af:b8:02:0c:cb:c6: 6b:dc:1e:ec:f3:9d:32:f2:d9:96:93:a5:48:cd:ac:92:d6:50: dc:4b:34:90:55:ad:dd:33:2d:84:fb:d4:80:ee:85:ca:9e:94: 46:f9:4a:06:41:68:1f:06:84:af:f5:c2:e6:38:25:3a:48:71: 59:95:4c:03:ec:e4:4d:b2:05:a1:90:64:6d:6b:c5:6e:ed:61: e0:9a:45:c8:b4:6a:71:4c:37:48:d9:32:55:4e:3c:f9:67:3c: 05:fd:93:04:e0:ae:d3:5d:e8:90:77:37:5e:dc:e6:97:a1:ff: 8e:67:66:47:af:f4:c3:06:26:95:de:db:c8:56:3d:4e:81:2e: 1c:31:3f:5f:8a:67:81:80:bb:79:b5:34:fe:f3:2a:fa:79:c4: 67:28:54:1c:2e:dc:e2:c9:7a:db:0e:9a:d3:0c:30:e2:11:e1: a0:aa:56:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMxMDgxMTAvBgNVBAUTKDc4NDVCNDZCNzBEREVCOTc4MjU0NzgyRUNEQkFFQzQx QzgzRTk3MjMwHhcNMjUwNDI0MjE1OTUzWhcNMjUwNTAxMjE1OTUzWjAYMRYwFAYD VQQDEw02ODBhYjQ1OS0zZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHHeboBCRNevXlWum3aSCJMaEvB7Vp3BCjxsQHuS4f+CKoOVEHIwHUAEGq+8 yft2cZTV3eLV+hgxgH4kQMIQonDUq9RlaIux5OjPnuzsA7C2xmOnSyRi5oFiOtRO u2I7tFgSFuxGVyiA1ur1d0KzWXU7YBOgcwJd5hxmEIAEAp7fv5ry2cjyhcc6zpqg Zuc4m+mne6x7u7E81npcEkJEYJC6R+Qg5ZEzvjTW6DrJz3JGGdcm/vat/QxP9n+y xtTu7p4NhglUyLYamXTiv7o5YM9DcEaZvzoW26ady5RRWTdnQKzXaPK0D4lMuTtr XuCS4LvcszX87/Snj3t4ELERCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB4Zqqgl aO8ttlzkRqSurf2Ym+fyMB8GA1UdIwQYMBaAFHhFtGtw3euXglR4Ls267EHIPpcj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzEwOC8wRDMzNEVENjYx NjUxMUVCOEQ0NTY4N0FDNEY5QUUwMi9lRVcwYTNEZDY1ZUNWSGd1emJyc1FjZy1s eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFVzBhM0RkNjVlQ1ZIZ3V6YnJzUWNnLWx5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzEwOC8wRDMzNEVENjYxNjUxMUVCOEQ0NTY4N0FDNEY5QUUwMi9lRVcwYTNEZDY1 ZUNWSGd1emJyc1FjZy1seU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1taw3GAtN/oTReKijmz1aLRjkiLIYg1kzWNZ6EXLRQ8+JrP5eIrjU zCueUSrP76kuQ/jq0DLSyBeIbTP3n+90fHzP0YfI9wLeSP+UfNeOWj1mDyevuAIM y8Zr3B7s850y8tmWk6VIzayS1lDcSzSQVa3dMy2E+9SA7oXKnpRG+UoGQWgfBoSv 9cLmOCU6SHFZlUwD7ORNsgWhkGRta8Vu7WHgmkXItGpxTDdI2TJVTjz5ZzwF/ZME 4K7TXeiQdzde3OaXof+OZ2ZHr/TDBiaV3tvIVj1OgS4cMT9fimeBgLt5tTT+8yr6 ecRnKFQcLtziyXrbDprTDDDiEeGgqlbS -----END CERTIFICATE-----Generated at Sat Apr 26 16:44:08 2025 by rpki-client